Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: cgvrHRz2asAfEDShNdguM5doZqC9Dm8BqAeftKsXYZ4=
Subject key identifier: 4A:9F:98:4C:A7:6E:8D:49:E8:FD:52:97:03:D3:BD:99:CE:BB:2A:E0
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019677C38184EFBD47192D17F741A03ABDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 15:00:23 +0000
Manifest this update: Sun 27 Apr 2025 15:00:23 +0000
Manifest next update: Mon 28 Apr 2025 15:00:23 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: /CyA0hMtUDKSwj/5qjN5EdVOB8wWaku+gA59cZtU2cc=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:81:84:ef:bd:47:19:2d:17:f7:41:a0:3a:bd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Apr 27 15:00:23 2025 GMT
Not After : Apr 28 15:00:23 2025 GMT
Subject: CN=4a9f984ca76e8d49e8fd529703d3bd99cebb2ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:55:a4:0b:d7:67:48:0d:7c:b0:10:35:31:
c9:df:74:6d:90:c9:b6:7d:25:56:0b:9e:b1:0c:45:
84:31:44:04:f9:7b:0d:03:5a:9b:da:e0:00:46:89:
05:99:dd:eb:9e:9a:da:2a:a1:12:28:b4:24:39:29:
65:5e:f6:c9:fb:99:8b:aa:6d:a0:20:0e:64:91:b0:
5f:f9:b1:41:31:81:c2:56:9d:ef:b8:38:b4:3c:ea:
a1:41:0f:cf:d0:2e:3f:d3:38:37:6b:71:74:f1:2c:
4b:48:69:ad:dc:93:44:d8:a3:c3:62:f0:01:a4:6a:
f2:65:6a:0b:46:4e:fc:24:e3:db:dd:9d:06:5a:7b:
20:3a:cb:22:fe:8e:2f:11:78:56:ba:e7:68:a6:82:
b7:cc:06:91:aa:83:90:af:7d:f5:39:02:e3:fc:8c:
69:de:bf:8f:0e:6a:6a:56:de:2d:cc:98:d4:6e:fb:
a1:14:12:24:75:37:1c:9e:04:96:e8:1a:21:c8:0a:
46:a3:fa:66:37:9b:1e:5e:a7:1c:07:a1:c8:d8:a1:
14:08:dd:a5:2c:f9:86:48:79:bf:67:61:5b:62:9a:
1d:ab:18:9a:ae:65:a0:99:6f:1a:4f:72:3a:a6:75:
9d:0f:0d:a3:4d:e9:c1:ca:63:24:15:50:60:48:4f:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:98:4C:A7:6E:8D:49:E8:FD:52:97:03:D3:BD:99:CE:BB:2A:E0
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:12:10:59:e5:5c:0a:06:9c:65:f0:3c:79:1d:33:cc:2d:99:
80:a6:79:3b:97:b0:4e:e9:04:55:ea:35:49:3e:f0:8b:42:ae:
1c:83:fe:40:cb:49:81:39:98:ab:13:a6:3e:c9:25:92:04:45:
b7:04:06:aa:1d:69:a6:e4:cd:ce:2d:51:49:95:be:cb:4a:57:
7a:fa:1d:ed:65:d5:50:e9:d8:9b:8a:ac:3a:cd:b2:e5:41:39:
6d:53:18:ce:7f:65:41:c4:f6:86:ae:7c:8f:c0:19:82:d7:4f:
b1:7d:cd:34:cc:25:5f:68:07:46:4d:a3:18:16:38:06:00:ed:
14:bf:db:45:34:ee:4d:ad:56:f3:a0:44:f4:15:c7:85:d7:89:
69:f7:33:ea:21:62:a8:42:76:c5:d9:cc:ae:d5:ae:e0:6c:13:
4e:1c:f9:ee:5c:fd:9b:3d:aa:71:7f:d3:b4:7d:9c:e8:f3:63:
46:d1:0b:6b:94:79:64:38:6a:de:80:fd:83:a0:12:1c:72:05:
9b:55:f7:e0:44:38:44:df:8e:e5:d9:d1:c6:5b:df:87:0f:b8:
f1:b0:26:69:02:e5:d7:20:0f:a5:9b:e1:d9:0b:86:a5:5a:cf:
5d:88:ad:4c:ff:4d:7f:b6:61:98:05:19:a3:4a:eb:e5:31:f9:
48:fb:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:47 2025 by rpki-client